ca.vanzyl.concord.ck8s:ck8s-cli (2.0.5), ca.vanzyl.concord.ck8s:ck8s-client (>=2.0.5, <=3.0.1) +236 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.1)

com.squareup.okhttp3:okhttp MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ca.vanzyl.concord.ck8s:ck8s-cli 2.0.5 - ca.vanzyl.concord.ck8s:ck8s-client =2.0.5, =2.0.4, =2.0.4, =0.0....

com.nylas.sdk:nylas (>=2.0.0-beta.1, <=2.11.1), com.nylas.sdk:nylas-java-sdk (>=0.1.0, <=1.22.0) +21 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.5)

com.squareup.okhttp3:okhttp MAVEN version 3.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.nylas.sdk:nylas =2.0.0-beta.1, =0.1.0, =1.22.0 - com.squareup.okhttp3.sample:crawler 3.14.5 -...

br.com.guiabolso:events-client (>=5.0.5, <=5.1.1), br.com.guiabolso:events-core (>=5.0.5, <=5.1.1) +45 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.10)

com.squareup.okhttp3:okhttp MAVEN version 3.12.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - br.com.guiabolso:events-client =5.0.5, =5.0.5, =5.0.5, =5.0.5, =5.0.5, =5.0.5, =3.0.1, =3.0.1, =3.0.1,...

ai.h2o:h2o-bindings (>=3.24.0.1, <=3.30.0.3), ai.idylnlp:idylnlp-dl4j (>=1.0.0, <=1.1.0) +1030 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.10.0)

com.squareup.okhttp3:okhttp MAVEN version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.h2o:h2o-bindings =3.24.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

ai.h2o:h2o-bindings (>=3.8.3.1, <=3.22.1.6), br.com.thiagomoreira.foursquare:foursquare4j (1.0.0) +238 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.3.1)

com.squareup.okhttp3:okhttp MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.h2o:h2o-bindings =3.8.3.1, =1.0.0, =1.0.4, =1.0, =0.1.6, =1.0.0, =3.2.11, =1.1.0, =1.0.0, =1.0.0, =1.8...

ai.databand:dbnd-agent (>=0.80.7, <=0.82.5), ai.databand:dbnd-api-deequ (>=0.80.7, <=0.82.5) +5842 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.9)

com.squareup.okhttp3:okhttp MAVEN version 3.14.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.databand:dbnd-agent =0.80.7, =0.80.7, =0.80.7, =0.80.7, =0.0.3, =1.0.2, =0.0.0.2-alpha, =1.0.0-beta03...

ai.berktest:berkclient (>=1.0.0, <=1.0.3), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +1962 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.11.0)

com.squareup.okhttp3:okhttp MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.berktest:berkclient =1.0.0, =1.7, =2.0.3.release, =2.0.2.release, =1.0.3.release, =3.1.4, =3.1.4,...

ai.databand:dbnd-agent (>=0.42.1, <=0.80.6), ai.databand:dbnd-api-deequ (>=0.42.1, <=0.80.6) +174 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.3.0)

com.squareup.okhttp3:okhttp MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.databand:dbnd-agent =0.42.1, =0.42.1, =0.40.2, =0.42.1, =1.5.0, =1.2, =0.0.1, =0.20, =0.20, =0.21 and...

ai.nextbillion:nbmap-sdk-api (>=0.1.0, <=0.1.2), ai.nextbillion:nbmap-sdk-core (>=0.1.0, <=0.1.2) +1022 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.7)

com.squareup.okhttp3:okhttp MAVEN version 3.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.nextbillion:nbmap-sdk-api =0.1.0, =0.1.0, =1.2.0-alpha04, =1.2.0-alpha04, =1.5.0-rc4, =1.0, =1.0.0,...

com.squareup.okhttp3.sample:crawler (3.12.5), com.squareup.okhttp3.sample:guide (3.12.5) +16 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.5)

com.squareup.okhttp3:okhttp MAVEN version 3.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.squareup.okhttp3.sample:crawler 3.12.5 - com.squareup.okhttp3.sample:guide 3.12.5 -...

br.com.basis:rancher-java-sdk (>=1.0.0-rc3, <=1.0.0), ch.aaap:harvest-client (>=0.2.1, <=1.1.9) +459 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.8.0)

com.squareup.okhttp3:okhttp MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - br.com.basis:rancher-java-sdk =1.0.0-rc3, =0.2.1, =1.0.4, =2.0.2, =0.0.1, =1.2.9, =2.2.0, =1.2.8, =1.2.3,...

com.baulsupp:oksocial (1.0.0), com.github.puresprout:okhttp-signpost-plus (1.0.0) +45 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.0.0-rc1)

com.squareup.okhttp3:okhttp MAVEN version 3.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.baulsupp:oksocial 1.0.0 - com.github.puresprout:okhttp-signpost-plus 1.0.0 -...

Improper Certificate Validation

Overview com.squareup.okhttp3:okhttp is a HTTP & HTTP/2 client for Android and Java applications Affected versions of this package are vulnerable to Improper Certificate Validation via the verifyHostName function in OkHostnameVerifier.java. An attacker can gain unauthorized access to sensitive...

au.org.consumerdatastandards:client (>=0.9.6, <=1.0.0-rc5), au.org.consumerdatastandards:client-cli (>=0.9.6, <=1.0.0-rc5) +841 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.2)

com.squareup.okhttp3:okhttp MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - au.org.consumerdatastandards:client =0.9.6, =0.9.6, =1.0.0-m11, =0.0.1-m8, =1.0.0-m6, =0.0.1-m15,...

cf.ystapi:ystapi (>=beta-0.0.1.3, <=beta-0.0.1.7), com.easemob.im:im-sdk-core (>=1.0.2, <=1.0.4) +42 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.13.0)

com.squareup.okhttp3:okhttp MAVEN version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cf.ystapi:ystapi =beta-0.0.1.3, =1.0.2, =0.0.2, =0.0.3 - com.github.v-play-games:bot.commands.mod 0.0.2 ...

Improper Certificate Validation in OkHttp

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate...

GHSA-4HC2-JH7R-WRC3 Improper Certificate Validation in OkHttp

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate...

CVE-2021-21430

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data...

Design/Logic Flaw

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data...

CVE-2021-21430

OpenAPI Generator contains a vulnerability where code generated for Java/Scala performs insecure temporary file creation via File.createTempFile, risking exposure of application/data when handling binary uploads/downloads. Affected generators include Java (jersey2, okhttp-gson default) and scala-...